cve/2022/CVE-2022-29587.md

CVE-2022-29587

Description

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root (aka superuser) access privileges.

POC

Reference

• https://sec-consult.com/vulnerability-lab/advisory/sandbox-escape-with-root-access-clear-text-passwords-in-konica-minolta-bizhub-mfp-printer-terminals/

Github

• https://github.com/ARPSyndicate/cvemon